CVE-2026-76862: Netcore NR255-V 1.5.130703 OS Command Argument Injection in Nettools tcpdump Launch Paths
Netcore NR255-V version 1.5.130703 contains an os command argument injection vulnerability in the Nettools tcpdump launch paths, including ntoolsstartsetcgi, ntoolstcpdumpstartsetcgi, exedefault, and ntoolsproc components. Attackers can inject crafted arguments into these tcpdump launch routines to manipulate executed system commands on the device.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Netcore NR255-V Nettools tcpdump launch paths (ntools_start_set_cgi, ntools_tcpdump_start_set_cgi, exe_default, ntools_proc)to a version that resolves this vulnerability.Fixed in 1.5.130703 - Compensating control
Harden tcpdump launch paths that call/execute system commands (ntools_start_set_cgi, ntools_tcpdump_start_set_cgi, exe_default, ntools_proc) by preventing crafted arguments from reaching the executed command (e.g., validate/allowlist arguments and ensure they are not used to build/append shell command strings).
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The CVSS vector indicates that exploitation is network-accessible and requires low privileges. No user interaction is required, and the attack complexity is rated low.
What is the potential security impact of successful exploitation?
Successful exploitation is rated as having high impact on confidentiality, integrity, and availability. The CVSS score is 8.8 (High), with scope unchanged.